Me too! I discovered from email notification an unauthorised access from IP address in Belarus. I login, revoked access for that device and then activated 2 step verification. That history was gone from access history and to my shock, I discovered numerous such access from 12 Sep ranging from locations like Shanghai, Thailand, Vietnam, India, Tanzania, Oman, Brazi, Russia, Brunei and Mexico!
Those were all Evernote Web accesses and I have no idea what was their purpose to login to my account? All these were never notified to me except for the one emailed to notify yesterday (Belarus).